Overview

overview

8

Static

static

3

2026-08-10...ry.exe

windows10-2004-x64

8

2026-08-10...ry.exe

windows11-ltsc_2024-x64

8

Analysis

  • max time kernel
    59s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    10/08/2026, 16:07

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-10_c665121fad4ad4468349a4473a098515_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
  • Size 34.6MB
  • Sample260810-tk28laxzbs
  • SHA256 da0eea672830b6661f7e3403d5e82d7f5905113196cc18ccd71356b85a022e05
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistence

Malware Config

Signatures

  • Drops file in Drivers directory 3 IoCs
  • Adds Run key to start application 2 TTPs 2 IoCs
    persistence
  • Drops file in Program Files directory 64 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_c665121fad4ad4468349a4473a098515_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-10_c665121fad4ad4468349a4473a098515_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe"
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:2396
  • C:\Users\Admin\AppData\Local\Temp\2026-08-10_c665121fad4ad4468349a4473a098515_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
    C:\Users\Admin\AppData\Local\Temp/2026-08-10_c665121fad4ad4468349a4473a098515_amadey_cobalt-strike_elex_emotet_hijackloader_icedid_njrat_remcos_vidar_wannacry.exe
    1⤵
    • Drops file in Drivers directory
    • Adds Run key to start application
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3272

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        7zG.exe
        • Path C:\Program Files\7-Zip\7zG.exe
        • Size 35.3MB
        • SHA256 e7eda4022cfd0fae13a43191f3427556a652e2c70a83e87c21fecd2afa1f2144
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        extcheck.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\extcheck.exe
        • Size 34.6MB
        • SHA256 00cda5679ce34dffb97507cef7348e6b6e4d5f1c0167299bb587bece391682b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        idlj.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\idlj.exe
        • Size 69.2MB
        • SHA256 defe21678d4bf7e8515ff2e79aa22d168e9a51764677a10785acea571bd7b7d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe
        • Size 69.2MB
        • SHA256 98f602203cf057cfe7df82a7881110f4571183330dd5e11b3afeda494918eaaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jar.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jar.exe
        • Size 69.2MB
        • SHA256 5652a6cfdf5fd959ae91298b12121dab7a980100efaba4e4e2e295ca89244417
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jarsigner.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe
        • Size 69.2MB
        • SHA256 aac61cef7fa95ee73f5ed25f127b7266f1e9e8c1affc01097b44de8768efffc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe
        • Size 63.4MB
        • SHA256 aa0967ad478baf69f403f1a01b98d394fae507d5a338ac5a56e38b81feba22b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\java.exe
        • Size 57.1MB
        • SHA256 d86a30b36f6c8c13e5d96a762eb6c119e161169dbf746ea7e5832646559b78ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javac.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javac.exe
        • Size 50.9MB
        • SHA256 157aa2f041cb1d83040870683dc0eee988502c1d008a8d272a316f9b26af6cb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javafxpackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe
        • Size 384KB
        • SHA256 144c4713f378ec54938375c9433afb979bcdaf05350d70c3d422e883e7e60d15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javah.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javah.exe
        • Size 45.1MB
        • SHA256 ab4fa064533ecd2045de0d18c259fd9ca920b655954d8a9c06e0e8dab11927bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javap.exe
        • Size 44.6MB
        • SHA256 2ac3f0a996fc143d801df233df895c463baee0ed79492259462e09c92aa79ae9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javapackager.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javapackager.exe
        • Size 39.1MB
        • SHA256 622ddd9755bcd77ece3fb2241dd73bb637e2f10c411b69c328d9a131dc1e48c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaw.exe
        • Size 37.4MB
        • SHA256 e75cd565350db1e813321acf38e0ce16c992e4da700165b3dc600d25af1f5b12
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\javaws.exe
        • Size 36.0MB
        • SHA256 e09dd6680e91e9ca8fb8492f54532632ff4199447b4c1dcff871d050b7aac07c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jcmd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jcmd.exe
        • Size 35.9MB
        • SHA256 948f78a9a01f226d1835798e6661173fd11e1100658205896e55c9dea208b7aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jconsole.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jconsole.exe
        • Size 35.3MB
        • SHA256 bab15a11c029ba20a25553216ed554825e97a4fb857bd6cd34d686018c64cea1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdb.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdb.exe
        • Size 34.3MB
        • SHA256 cbd679d2408ffe741488903c25583cf52fbcaf454e62423f9e6cb5ad872f7d1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jdeps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jdeps.exe
        • Size 33.9MB
        • SHA256 e9b1a5c5e4fbd8601640227ed28778752f0a70969449154724df6894d4f46e1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jhat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jhat.exe
        • Size 34.6MB
        • SHA256 edf07dc3e603d4c2d1a8590e460ee5cc53a6fa59150f43f6960eecf0ba2714dd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jinfo.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jinfo.exe
        • Size 33.2MB
        • SHA256 0f6afa405a6d02bf11cd1591884119087f9e0ff29ddfc77536b6f94863ee716f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jjs.exe
        • Size 33.8MB
        • SHA256 e8e92d0232c9e18384d91b201b480dd435de700e9fad428d1b895f30428bdd8d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jmap.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jmap.exe
        • Size 30.1MB
        • SHA256 3a331e984a3927a7e310ad224e2bc2efda3e56c8b60ef3618b943c9eee344386
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jps.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jps.exe
        • Size 32.6MB
        • SHA256 54316991f692c6a1b0ad4f7c9b1eb6b79aa2db30c1f4e63f1a289a30aa981d81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jsadebugd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe
        • Size 32.0MB
        • SHA256 29c4af58e83b9b1b82a54a8a81dcf5326d5850e7805b3831dd4735bdbdebba65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstack.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstack.exe
        • Size 31.8MB
        • SHA256 94735c0901f673c6044fadd446765af3e7860a68798cda9b102a293f08b56f4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstat.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstat.exe
        • Size 30.4MB
        • SHA256 ba9cd5872f719ddfcec053e80accc1f2a66060ab0b29bd4d2a985a4adc76317e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jstatd.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\jstatd.exe
        • Size 30.3MB
        • SHA256 c382d1774f0d3e01f6b201e3010565bdaf6b2696003978aa73f4280dda95d260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\keytool.exe
        • Size 30.6MB
        • SHA256 c784219cf065452e4daa62b46459c573aae06a6d857f16941ffd11e6c99aab84
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\kinit.exe
        • Size 30.2MB
        • SHA256 90c9854071ed5858628fa64a397b9d2d62eecae088b65aad5058053eb117ccaf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\ktab.exe
        • Size 27.2MB
        • SHA256 cf28efad3ffe2283f4acba8b2965ff9122ec9085b708ebabb4647b82c716de25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        native2ascii.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe
        • Size 30.0MB
        • SHA256 18eb675174515a6448e7d95b54741105cb4c0bc0095383fbedd4e8eeb724d9f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\pack200.exe
        • Size 29.6MB
        • SHA256 9137019c3a735bbf1ce65e7745ea5f180c9045fb39b2ac8cacbbadc89e989da5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\policytool.exe
        • Size 29.9MB
        • SHA256 addec139c6b3b96e383bed274886b54028a29b35bc458357930b470b678a35d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmic.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmic.exe
        • Size 30.1MB
        • SHA256 e29753e7013fdc19b60da6e49db26ba4d1073dfdc759c56c090b945aed0bd958
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmid.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmid.exe
        • Size 29.8MB
        • SHA256 61f1e26d4cd69fb26180cf97a0c9d3ac80e8674047808a5cd9b04239d0d0107d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        rmiregistry.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe
        • Size 29.5MB
        • SHA256 5ef88a6b8f4b6736cc9125b154501b1caa6aec9bcf2dd8c2ac8bc8002e4ebb16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        schemagen.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\schemagen.exe
        • Size 26.4MB
        • SHA256 976e39976de9c9841182e1a1a9c2f504d7b99429664d753b7931b1ab575f1dd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        servertool.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\servertool.exe
        • Size 29.2MB
        • SHA256 477cbf04fdfa3a8470146bce4fd3365ae048ac05c9443e37163a63f75385ac74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tnameserv.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe
        • Size 29.1MB
        • SHA256 849e4862d62aacdfef186221020b3a8f44759763a7e4fa60af234ad2700824b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unpack200.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\unpack200.exe
        • Size 28.6MB
        • SHA256 1907dd8baf100d8592345faf1d931bf4477aee6c93b9f8c7cbbcd9fbba5b86ce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        xjc.exe
        • Path C:\Program Files\Java\jdk-1.8\bin\xjc.exe
        • Size 28.0MB
        • SHA256 6687a65ab0da5188ff63368140973c5abe4d7f4d95112469b38229c597c36edd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jabswitch.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe
        • Size 27.8MB
        • SHA256 9aff5458efda9c2b6d3a26ea8a428a3f0dda904ab94f9f31d33c472a4028a0ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java-rmi.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe
        • Size 27.7MB
        • SHA256 534d2464a9a2c54b435e9938581d0b2cfde3d4e80b43658f93c812bf88c400a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        java.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
        • Size 27.8MB
        • SHA256 893cb3f75912aa0e03496b810ab69322a686c994086f9d255abc372f8f3765bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javacpl.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
        • Size 27.4MB
        • SHA256 358c23229fc1ae22103562ae227367a1c38e5e8cd4586bf2dd96c5dd3a311dff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaw.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
        • Size 24.5MB
        • SHA256 37b6296d2152f2624aabf4f17f1a3c78ccde3f9de77fe8872fbcd12d09ee1404
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        javaws.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
        • Size 24.4MB
        • SHA256 47bf5e7a399367508dad45ab44d5ce28dc64504c6786e4fde637b67ec4412ced
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jjs.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe
        • Size 24.3MB
        • SHA256 74dcf38e509525c2f8edbbdb0def85872f86951cc4382c07ed24d5148a9990fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jp2launcher.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
        • Size 27.4MB
        • SHA256 5504019e51d377d8b6d657150544a1e316fcdc4644c3c003de1f8b1f1c2d01ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        keytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe
        • Size 27.0MB
        • SHA256 19cf8c6bbcbae3106a28eba08b64b2f93688253e3184dee95609374462edd0e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kinit.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe
        • Size 27.1MB
        • SHA256 2b2470b5f973264aba04bf034ef8c0f9e698af9c74c305416cd120afb5eb87b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        klist.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe
        • Size 26.8MB
        • SHA256 2e40349c615c5eddf6d76dcc9af96ed6a00582e8c7679347a8a7507b9de3011a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ktab.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe
        • Size 26.7MB
        • SHA256 f9226712e7de316facfc3a45f56252a5e92de7cf2ff1a3dc4cab9ae919db4f4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pack200.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe
        • Size 23.6MB
        • SHA256 c439a0cd3fa848aebc5899b99662f9f6fd790df48dd8f042a286e0089007a098
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        policytool.exe
        • Path C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe
        • Size 26.4MB
        • SHA256 fad5527d89d9c63cd88195f5dc21bbb468d5a67576f1e91dc47c6160b09a349f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        spo0lve.exe
        • Path C:\windows\SysWOW64\drivers\spo0lve.exe
        • Size 34.6MB
        • SHA256 da0eea672830b6661f7e3403d5e82d7f5905113196cc18ccd71356b85a022e05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2396-0-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/2396-4-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download

        memory/3272-5-0x0000000000400000-0x00000000004E4000-memory.dmp
        Download